What’s Vulnerable › Vulnerabilities

CVE-2023-43256

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-25 · updated 2026-06-17
• Weakness: CWE-22

Description

A path traversal in Gladys Assistant v4.26.1 and below allows authenticated attackers to extract sensitive files in the host machine by exploiting a non-sanitized user input.

Affected products

• Gladysassistant Gladys Assistant: through 4.26.1

References

• https://blog.moku.fr/cves/CVE-2023-43256/
• https://blog.moku.fr/cves/CVE-unassigned/
• https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b
• https://blog.moku.fr/cves/CVE-2023-43256/
• https://blog.moku.fr/cves/CVE-unassigned/
• https://github.com/GladysAssistant/Gladys/commit/f27d0ea4689c3deca5739b5f9ed45a2ddbf00b7b

Get alerted when CVE-2023-43256 or the next vulnerability affects your stack